CVE-2011-2054

cisco asa 5500 firmware, cisco asa 5510 firmware, cisco asa 5512-x firmware +9 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2011-2054

Katalog CVE

CVSS 7.5 · High EPSS 0,86%

Kerentanan Improper Authentication pada cisco asa 5500 firmware, cisco asa 5510 firmware +10 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.

Rincian

Terbit di NVD
19 Februari 2020
Terakhir diubah
16 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-287: Improper Authentication
EPSS (30 hari)
0,86% peluang dieksploitasi; lebih tinggi dari 57,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco asa 5500 firmware Versi 8.4(1)
cisco asa 5510 firmware Versi 8.4(1)
cisco asa 5512-x firmware Versi 8.4(1)
cisco asa 5515-x firmware Versi 8.4(1)
cisco asa 5520 firmware Versi 8.4(1)
cisco asa 5525-x firmware Versi 8.4(1)
cisco asa 5540 firmware Versi 8.4(1)
cisco asa 5545-x firmware Versi 8.4(1)
cisco asa 5550 firmware Versi 8.4(1)
cisco asa 5555-x firmware Versi 8.4(1)
cisco asa 5580 firmware Versi 8.4(1)
cisco asa 5585-x firmware Versi 8.4(1)

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.